Oracle Cloud Infrastructure Secret Management

Oracle Cloud Infrastructure Secret Management provides a centralized service for securely storing, retrieving, and managing passwords, API keys, tokens, SSH keys, and other sensitive data across OCI environments. Secrets are encrypted at rest using OCI Vault keys and protected by FIPS-validated key protection, enabling consistent security controls and isolation. The service supports automated lifecycle operations including configurable secret auto-generation, automated rotation with intervals from 1 to 12 months, versioning for safe updates and rollbacks, and rules for expiry and prevention of reuse to reduce credential-related risk. OCI Secret Management also supports cross-region replication across up to three OCI regions to improve availability and disaster recovery, and integrates with OCI IAM, compartments, tags, and governance tooling for fine-grained access control. Enterprise-scale design features include high availability, regional isolation, zero-downtime versioning, and programmable refresh to reduce manual overhead. The service is highlighted in Oracle communications (including an Aug 14, 2025 announcement about cross-region replication) and is positioned to support automated secret workflows and multiregion deployments without additional service charges for the core Secret Management offering.